Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/22/31fded-6fde-45ce-b358-a26889ee22c2/1/S6eyT4fqUURtUZr9T-YEGRmOwBI.mft
File:                     S6eyT4fqUURtUZr9T-YEGRmOwBI.mft (raw, json)
Hash identifier:          oNkgYthTIevNSu7P5u/R8pf/9sN/iJV2QjlaO97FUDU=
Subject key identifier:   75:6D:30:26:3C:C1:62:48:C4:E3:68:3C:87:4E:95:E5:FE:E4:9C:74
Authority key identifier: 4B:A7:B2:4F:87:EA:51:44:6D:51:9A:FD:4F:E6:04:19:19:8E:C0:12
Certificate issuer:       /CN=4ba7b24f87ea51446d519afd4fe60419198ec012
Certificate serial:       0199FCFDB5656098EA2869A462970C28A623
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/S6eyT4fqUURtUZr9T-YEGRmOwBI.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/22/31fded-6fde-45ce-b358-a26889ee22c2/1/S6eyT4fqUURtUZr9T-YEGRmOwBI.mft
Manifest number:          16E3
Signing time:             Sun 19 Oct 2025 15:01:49 +0000
Manifest this update:     Sun 19 Oct 2025 15:01:49 +0000
Manifest next update:     Mon 20 Oct 2025 15:01:49 +0000
Files and hashes:         1: S6eyT4fqUURtUZr9T-YEGRmOwBI.crl (hash: 2He9NgI7a1HmvHPaKSKBNHaJ4TopdIhpas9snpf3ttM=)
                          2: k-8joWHq0IXSAeF06EYlGj2AITA.roa (hash: OrXpbU3ZTRNxide1ly7PEoXo5UOkEqSaVuBCmUkwkxg=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/22/31fded-6fde-45ce-b358-a26889ee22c2/1/S6eyT4fqUURtUZr9T-YEGRmOwBI.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/22/31fded-6fde-45ce-b358-a26889ee22c2/1/S6eyT4fqUURtUZr9T-YEGRmOwBI.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/S6eyT4fqUURtUZr9T-YEGRmOwBI.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 20 Oct 2025 11:18:59 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:99:fc:fd:b5:65:60:98:ea:28:69:a4:62:97:0c:28:a6:23
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4ba7b24f87ea51446d519afd4fe60419198ec012
        Validity
            Not Before: Oct 19 15:01:49 2025 GMT
            Not After : Oct 20 15:01:49 2025 GMT
        Subject: CN=756d30263cc16248c4e3683c874e95e5fee49c74
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cc:5c:1b:69:01:cf:ee:25:e4:d2:03:1e:f0:a1:
                    73:89:a0:f7:24:43:e9:d5:0d:7a:28:0b:2e:79:cd:
                    37:73:9d:9d:6a:0b:c6:63:a1:c7:03:84:a6:29:1e:
                    b1:b1:be:d2:a3:f4:ec:ba:6b:3a:12:c5:89:cd:3d:
                    cc:bf:7b:7c:07:70:3f:48:cd:7e:5d:86:bd:2a:2a:
                    b8:30:be:4d:c5:bc:10:c1:51:6c:4b:28:df:61:17:
                    97:24:44:38:df:38:92:69:ed:97:18:f4:62:25:1e:
                    94:79:d5:23:d4:e3:59:68:da:18:40:7f:5a:b7:67:
                    11:e3:c7:d3:83:5f:31:94:1b:99:3d:2c:fb:65:4e:
                    bf:74:8c:ec:a5:f8:59:81:16:bf:26:31:48:46:2e:
                    c6:75:02:2d:aa:a3:f2:25:13:2f:5b:28:02:e9:49:
                    7a:c8:75:9c:c8:d3:1b:27:3a:5f:fa:f5:6d:1e:dd:
                    fa:0e:eb:02:18:64:87:f8:31:8c:ec:a2:df:b5:d9:
                    88:a9:5b:4c:9a:9e:04:0d:8f:d4:4e:96:68:30:3e:
                    78:c1:19:29:67:f6:d1:19:db:4e:0b:a9:0d:24:13:
                    e6:68:11:41:9f:b6:2b:0b:8e:98:96:4f:be:e6:74:
                    a5:46:04:61:cd:83:39:e5:1a:ff:ea:ee:fd:9e:e7:
                    51:fd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                75:6D:30:26:3C:C1:62:48:C4:E3:68:3C:87:4E:95:E5:FE:E4:9C:74
            X509v3 Authority Key Identifier:
                keyid:4B:A7:B2:4F:87:EA:51:44:6D:51:9A:FD:4F:E6:04:19:19:8E:C0:12

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/S6eyT4fqUURtUZr9T-YEGRmOwBI.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/22/31fded-6fde-45ce-b358-a26889ee22c2/1/S6eyT4fqUURtUZr9T-YEGRmOwBI.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/22/31fded-6fde-45ce-b358-a26889ee22c2/1/S6eyT4fqUURtUZr9T-YEGRmOwBI.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         75:39:01:41:ce:b3:53:c4:e5:c3:af:e6:f6:2d:3d:c3:b5:be:
         53:0a:ad:c1:ff:d4:34:f7:21:fe:a2:f3:f2:bc:bf:a2:95:66:
         82:d5:ee:f2:36:d3:d9:c9:dd:83:5f:40:96:6c:d0:86:39:06:
         0a:12:c1:76:d9:fa:45:8b:50:74:fc:c7:0f:53:8e:c6:49:10:
         a6:1a:1e:94:1f:2f:0b:bf:9c:e4:17:3c:7b:61:2a:f2:cd:eb:
         01:e9:0a:89:be:fd:f9:a5:52:c7:76:41:71:59:85:4c:be:6a:
         9c:9b:d5:06:06:6e:db:4d:f9:5e:c0:c5:7f:89:2c:cf:6d:41:
         ab:77:45:75:6a:62:d5:89:b1:c2:63:b4:f3:0b:42:23:81:19:
         e6:83:5f:a4:34:8e:02:d6:23:7f:06:5d:df:a7:2e:0d:f9:78:
         58:43:2a:d0:9a:17:8e:e5:3e:9d:33:00:d4:07:77:c8:fb:27:
         c2:89:31:67:a0:47:26:0a:49:c3:28:15:7f:84:2c:3e:79:94:
         d3:be:c8:92:b1:84:21:eb:ac:36:8a:ae:a7:b4:4a:67:07:35:
         58:78:ac:93:dd:ff:59:5b:d2:95:59:1c:b8:ee:1e:b5:63:ec:
         2f:97:4f:a7:b5:1c:1c:bc:73:03:26:2e:83:7f:0f:c9:1d:f1:
         a7:9c:a9:4c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 19 18:40:37 2025 by rpki-client